CVE-2013-2177

2013-06-2518:00:00

redhat

www.cve.org

cve-2013-2177

cross-site scripting

display suite module

drupal

remote authenticated users

web script

html

entity bundle label

AI Score

5.4

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via an entity bundle label.